@juergen-hubert.mementomori.social.ap.brid.gyIch betreibe auch eine #MediaWiki -basierte Wiki.
Ich habe zwar noch keine direkten Änderungsversuche gefunden, aber Scraper-Botnetze merke ich ständig in den Logs. Es gibt mehrere tausend "RecentChanges"-Anfragen jeden Tag, und sowas macht kein normaler Benutzer.
@professional.wikiUpdated "Wikibase Hosting Options Compared" for 2026
#WikibaseCloud has a new hosting policy, and our dedicated #MediaWiki hosting now gets you additional #Wikibase extensions, DPA, and encrypted second-provider backups.
professional.wiki/en/articles/...
Anything else that should be included?
@professional.wiki🚨 MediaWiki security release: upgrade to 1.43.11, 1.45.6 or 1.46.2.
Also upgrade your extensions! External Data before 3.7 allows unauthenticated remote code execution and is being exploited 🤯 If you run it, check for intrusions.
@troed.swecyb.com.ap.brid.gyFor the second day in a row #MediaWiki ships a broken update.
@securityonline.bsky.socialAttackers exploit CVE-2026-100382, a CVSS 10 unauthenticated MediaWiki RCE in External Data. PoC is public. Upgrade to 3.7 now.
#MediaWiki #ExternalData #CVE2026100382 #RCE #CommandInjection #ExploitedInTheWild #PoC
@professional.wikiSemantic MediaWiki 7.3.0 and 7.3.1 are out. Both improve security, so we recommend upgrading to 7.3.1.
Nearly all fixed issues also affect older versions, and only SMW 7 gets security fixes.
professional.wiki/en/news/semantic-mediawiki-7-3-released
@semanticmw.bsky.social #MediaWiki #Security
@martin-harnisch.bsky.socialDanke an meine Kolleg*innen aus der Fachgruppe Wiki der @gfwm.bsky.social für die tolle Zusammenarbeit. Bin super gespannt, wie es nach dem "Go-Public" weitergeht! 😊
Zum Blog-Beitrag: www.gfwm.de/gfwm-wiki-go...
@hugovalters.bsky.socialCVE-2026-77608 Semantic MediaWiki reflected XSS before 7.2.0, CVSS 6.1, no patch confirmed. Update to 7.2.0 now. https://www.valtersit.com/cve/CVE-2026-77608/ #CVE #infosec #MediaWiki
@ubuntutr.bsky.socialUbuntu Wiki 16 Yıl Sonra Yeniden Tasarlandı
#UbuntuWiki #Mediawiki #UbuntuHaberleri #AçıkKaynak #Topluluk #Haberler
https://www.ubuntu.org.tr/ubuntu-wiki-16-yil-sonra-yeniden-tasarlandi/
@professional.wikiMaps 14.2.1 and 15.0.0 are out. Security release, upgrade recommended.
14.2.1 fixes an SSRF issue in the Leaflet geojson parameter. Maps 15 makes it the default: kml and geojson only load files on your wiki.
github.com/ProfessionalWiki/Maps/blob/15.0.0/RELEASE-NOTES.md
Since my MediaWiki postgres container is working again… Taking the vacuum through the tickets.
Some of this is so easy to fix, but you need to be able to test the changes, and often Postgres support is broken again when you want to look at any of these.
@hugovalters.bsky.socialWikimedia Foundation: 127 CVEs, 0 critical — but 61% unpatched and Trust Score C. XSS (CWE-79) drives 49 issues. Open source ≠ risk-free. Check your MediaWiki exposure: https://www.valtersit.com/vendors/wikimedia-foundation/ #cybersecurity #infosec #MediaWiki